California Attorney General Rob Bonta has reached a $530,000 settlement with Sling TV, marking the first enforcement action under the California Consumer Privacy Act (CCPA) against a streaming service....more
On October 21, 2025, the California Privacy Protection Agency (CPPA) launched a webpage previewing the Data Rights Opt-out Portal (DROP), a tool designed to fulfill the California Delete Act’s mandate to create a centralized...more
Here are some recent privacy and cybersecurity related news stories that caught our attention over the past couple of weeks.
Otter.ai Suit Highlights Risks of Using User Data to Train AI -
Otter.ai is facing a federal...more
10/21/2025
/ Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Compliance ,
Consent ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
Machine Learning ,
Popular ,
Privacy Laws
As businesses are under increasing pressure to develop and deploy artificial intelligence (AI) tools, their legal departments are facing new challenges at this intersection of innovation, compliance, and risk. Recently,...more
As businesses are under increasing pressure to develop and deploy artificial intelligence (AI) tools, their legal departments are facing new challenges at this intersection of innovation, compliance, and risk. Recently,...more
Otter.ai is facing a federal class action in California alleging that its AI transcription tool, Otter Notetaker, secretly recorded private conversations on popular video conferencing platforms without proper consent. The...more
Laws that would require age verification before users can access online platforms are popping up across the county. While some laws have been found constitutional, courts are still drawing lines over what age verification...more
Recent regulatory actions and court decisions highlight growing uncertainty over whether sharing article title data from webpages amounts to disclosure of sensitive health information under privacy laws....more
To bring a claim under the Video Privacy Protection Act (VPPA), a plaintiff must qualify as a “consumer,” which the statute defines as any renter, purchaser, or subscriber of goods or services from a video tape service...more
The Minnesota Consumer Data Privacy Act takes effect July 31, 2025. The Minnesota measure has a few unique requirements among state comprehensive privacy law. Here are a few that deserve a second look...more
On July 24, 2025, the California Privacy Protection Agency (CPPA) Board held a public meeting to finalize major amendments to the CCPA regulations, including rules on Automated Decision-Making Technology (ADMT), risk...more
On June 25, 2025, Governor Ned Lamont signed Connecticut Senate Bill 1295 into law. SB 1295 significantly amends the Connecticut Data Privacy Act (CTDPA) by lowering the threshold for applicability, broadening the definition...more
On June 22, 2025, Texas Governor Greg Abbott signed the Texas Responsible AI Governance Act (TRAIGA) into law. While earlier versions of the bill mirrored broader frameworks like the EU AI Act, the final version scales back...more
A federal court in Illinois has dismissed a class action suit filed under the Illinois Biometric Information Privacy Act (BIPA), finding that Hyundai did not “collect, capture, or otherwise obtain” biometric data by use of...more
In a significant win for the defense, a California federal judge denied class certification in a California Invasion of Privacy Act (CIPA) suit alleging that AddShoppers and Peet’s Coffee unlawfully tracked website visitors...more
7/2/2025
/ California ,
CIPA ,
Class Action ,
Class Certification ,
Cookies ,
Data Collection ,
Data Privacy ,
Invasion of Privacy ,
Litigation Strategies ,
Privacy Laws ,
Web Tracking ,
Websites
The New Jersey Division of Consumer Affairs has released proposed rules to implement the New Jersey Data Privacy Act (NJDPA). For covered businesses, these proposed rules demand close attention—not only for their substantive...more
Here are some recent privacy and cybersecurity related news stories that caught our attention over the past couple of weeks.
California Privacy Protection Agency (CPPA) Issues New Proposed Regulations -
The CPPA has...more
In case you missed it: Michigan’s Attorney General has filed a lawsuit against Roku, alleging that the company collects and shares children’s personal data and video viewership data in violation of COPPA and the VPPA,...more
On January 16, 2025, the Federal Trade Commission (FTC) published its Final Rule officially adopting updates to the Children’s Online Privacy Protection Act (COPPA). For a comprehensive overview of these changes, be sure to...more
The U.S. Department of Justice (DOJ) has issued a final rule that significantly restricts the transfer of bulk sensitive personal data and government-related data to certain foreign entities deemed countries of concern....more
Overview -
In 2024, lawsuits targeting companies for their use of commonly deployed digital tracking technologies, such as pixels, and session replay tools proliferated. Frequently used on apps and websites, tracking...more
As state-level privacy laws continue to expand in the absence of federal legislation, businesses must prepare to meet a growing patchwork of requirements or risk penalties and reputational harm. In 2025, eight additional...more
With increasing scrutiny on how companies handle personal data of children under 18, several new laws are reshaping the legal landscape. Even companies that may not intend to direct their services to children still need to be...more
Companies frequently wish to record telephone conversations related to their operations, customers, or business transactions. In response, the U.S. Congress and most state legislatures have enacted statutes and regulations...more
Companies frequently wish to record telephone conversations related to their operations, customers, or business transactions. In response, the U.S. Congress and most state legislatures have enacted statutes and regulations...more